Description
Format string vulnerability in PackageKit in Apple Mac OS X 10.6.x before 10.6.6 allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to interaction between Software Update and distribution scripts.
References
- 1024938 vdb-entry
- APPLE-SA-2011-01-06-1 vendor-advisory
- ADV-2011-0050 vdb-entry
- http://support.apple.com/kb/HT4498
- 42841 third-party-advisory
- 70309 vdb-entry